Amendments to the Claims 



Kindly amend claims 1-20, cancel claims 21-25, and add new claims 26-28 as set forth 
below. All pending claims are reproduced below, with changes in the amended claims shown by 
underlining (for added matter) and strikethrough/double brackets (for deleted matter). 

1. (Currently Amended) A computer-implemented method [[of|] comprising: 

securely managing an arbitrary number of data files in non-volatile storage 
in order to restore data after abortion of a write operation, the data being stored in 
a record oriented data structure with each of the records containing, in addition to 
data contents, a first reference indicating the current data-containing record of a 
previous file, and a second reference indicating the current data-containing record 
of a subsequent file, wherein the write operation comprises an update stage and an 
atomic write stage, the update stage comprising multiple update operations 
performed for a plurality of records employing the second references of at least 
some records of the plurality of records, and wherein the updates to the plurality 
of records are accepted in one atomic write stage after completion of the multiple 
update operations, the one atomic write stage employing the first references of the 
at least some records of the plurality of records, and wherein at all times during 
the write operation, all of the data files affected by the write operation contain 
either all of the data stored prior to the write operation, or all of the data as 
modified subsequent to the write operation. 

2. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 1, wh e r e th e or wherein each file affected by a write operation comprises a plurality of 
records, one of said records in [[the or]] each file containing the data prior to said write operation 
and another of said records being modified according to said write operation, each of said 
records also comprising a status byte indicative of the status of the data contained therein. 

3. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 2, wherein said data prior to the write operation, in each file, is retained as the active data 
in the case of a power failure, until all files have been successfully updated according to said 
write operation. 
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4. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 1, wherein each record contains a synchronization byte, indicating a relationship with 
records of other files. 

5. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 3, wherein each record contains a synchronization byte, indicating a relationship with 
records of other files. 

6. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 5, wherein the first reference of each record comprises a first pointer (PTR 1) indicating 
the current data-containing record of a previous file and the second reference of each record 
comprises a further pointer (PTR 3) indicating the current data-containing record of a subsequent 
file. 

7. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 6, wherein a third reference of each record comprises a second pointer (PTR 2) indicating 
the current data-containing record of that file. 

8. (Currently Amended) A computer-implemented method [[of]] comprising: 

securely managing EEPROM data files in order to restore data after 
abortion of a write operation, the data being stored in the files in a record-oriented 
data structure, such that the data in all files affected by the write operation is 
consistent with respect to completion of the write operation, and wherein 
information concerning the status and location of the consistent data is stored in 
the record oriented data structure together with the data, wherein each record of 
the record oriented data structure of the files comprises, in addition to data 
contents, a first reference indicating the current data-containing record of a 
previous file, and a second reference indicating the current data-containing record 
of a subsequent file, wherein the write operation comprises an update stage and an 
atomic write stage, the update stage comprising multiple update operations 
performed for a plurality of records employing the second references of at least 
some records of the plurality of records, and wherein the atomic write stage is 
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performed upon completion of the multiple update operations and employs the 
first references of the at least some records of the plurality of records. 

9. (Currently Amended) [[A]] The computer-implemented method according to 
claim 8, wherein two or more data files are affected by said write operation, and wherein new or 
modified data is written into said files in a cyclic manner, wherein each file comprises an 
indication of the number of records contained in said file and a plurality of records, and wherein 
each record comprises an indication of the status of the data in said record, and a synchronisation 
number synchronising with records of other files. 

10. (Currently Amended) [[A]] The computer-implemented method according to 
claim 9, further comprising determining a current active record of a first of said files, and a 
working record of said first file; setting the synchronization number of the working record of 
said file to the synchronization number of the current active record; copying the data stored in 
said current active record into said working record and adding to or modifying said data 
according to said write operation, in said working record; changing the status of said working 
record of said file to 'active 1 ; repeating said steps for each further file; and changing the record 
status of said original current active record of said first file to 'inactive' as an indication that said 
write operation is complete. 

1 1. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 10, wherein said step of determining the current active record and the working record of 
said files comprises searching for the first record in said file whose status byte indicates 'active' 
status and setting this record as said current active record, and setting the subsequent record as 
said working record. 

12. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 11, comprising: 

adding to or modifying the data of a record in the first file by: 

identifying the current active record of said file and a working record and 
copying the data to be added to or modified from the current active record to the 
working record; 
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modifying the data in said working record in accordance with the write 
operation; wherein the status byte of said current active record indicates that that 
record is 'fully active' and the status of said working record indicates that that 
record is 'inactive'; 

setting synchronization indicator pointers to indicate that said file is said 
first file and to indicate that no further files have been modified; 

identifying a current active record and a working record of a second file 
and copying the data from the current active record to the working record; 
modifying the data in the working record according to said write operation, 
wherein the status byte of said active current record indicates that the data in this 
record is "fully active" and the status byte of the working record indicates that this 
record is 'inactive'; 

setting synchronization indicator pointers to indicate the link between this 
file and said first file, and changing said synchronization indicator pointer of said 
first file to indicate its link with said second file; and 

repeating these steps for said second file for any subsequent files, wherein 

for the last file affected by said write operation, after setting said 
synchronization indicator pointers, determining that this is the last file, setting an 
indication pointer to indicate that no subsequent files are affected by said writing 
operation; and 

setting the status byte of each of said working records of said affected files 
to a 'fully active' state, whereupon the write operation is complete and the 
modified data is the active data in all files. 
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13. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 12, wherein, upon interruption of said write operation at any stage, either all current active 
records of all files affected by said operation are set as 'fully active 1 records, and the data 
contained in said files prior to the start of said write operation is the current active data, or all 
working records of all files are set to a 'fully active' status, in which case all files contain the 
modified data due to said write operation as said active data. 

14. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 13, wherein interruption of said write operation during or immediately after the step of 
modifying the data in the working record of said first file results in the current active record of 
said first file remaining as the 'fully active 1 data record, at which time no further files have been 
modified and all of the 'active* datable files correspond to the data prior to the write operation. 

15. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 13, wherein an interruption of said write operation during or subsequent to the setting of 
the synchronization indicator pointers in said first file results in the current active record of said 
first file remaining as the 'fully active' data record, at which time no further files have been 
modified and all of the 'active' datable files correspond to the data prior to the write operation. 

16. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 13, wherein an interruption of said write operation during or immediately after the step of 
modifying the data in the second or subsequent files results in the current active record of said 
second or subsequent file remaining set as said 'fully active' record, and, since said 
synchronization indicator pointer of said first file still indicates that said current active record is 
still said 'fully active' record of said first file, the currently active data of both or all of said files 
remains as that prior to the start of the write operation. 

17. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 13, wherein an interruption to said write process during or immediately after modifying the 
data in the working record of the last file affected by said write operation, results in all of the 
current active records of all of said files being retained as said fully active records, wherein the 
currently active data corresponds to the data prior to the write operation. 
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18. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 13, wherein an interruption of said write process during or immediately after modification 
of the data in the working record of the last file affected by said write operation, causes all 
working records of all of said files to become set to 'fully active* records, such that all files 
contain data modified as a result of said write operation as the currently active data. 

19. (Currently Amended) [[A]] The computer-implemented method as claimed in 
claim 12, wherein, when all of said write steps have been successfully completed, without an 
interruption, said synchronization indicator pointers are used to indicate the links between the 
modified records of the files affected, and all working records are set to status 'fully active' and 
said current active records are set to status 'inactive 1 . 

20. (Currently Amended) A system for securely managing EEPROM data files so 
that the data can be restored after abortion of the write operation to said data files, the system 
comprising! 

an EEPROM, and means for writing data to said EEPROM, said 
EEPROM comprising a number of data files, each data file comprising a plurality 
of records in a record oriented data structure, wherein each record of the record 
oriented data structure of the data files comprises, in addition to data content, a 
first reference indicating the current data-containing record of a previous file, and 
a second reference indicating the current data-containing record of a subsequent 
file, wherein the write operation comprises an update stage and an atomic write 
stage, the update stage comprising multiple update operations performed for a 
plurality of records employing the second references of the plurality of records, 
and wherein the atomic write stage is performed upon completion of the multiple 
update operations and employs the first references of the at least some records of 
the plurality of records. 

21-25. (Canceled). 
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26. (New) A computer-implemented method for ensuring the consistency of data 
stored in records in different files, the records being changed by a transaction, each change to a 
record of a file leading to the generation of new records in the files affected by the transaction, 
the method comprising: 

a) designating one of the files affected by the transaction as a primary 
file, only the primary file having a status concerning the successful execution of 
the transaction, the status assuming the value "current" or "not current"; 

b) setting the status to "current" in each newly generated primary 
record in the primary file; 

c) testing whether the primary file contains multiple primary records 
having the "current" status; 

d) resetting the status of the primary record of the primary file 
preceding the newly generated primary record to "not current", and retaining the 
"current" status of the newly generated primary record, if the write operation for a 
record of the files affected by the transaction is determined not to have terminated 
prematurely and resetting the status of the newly generated primary record to "not 
current", and retaining the "current" status of the preceding primary record of the 
primary file, if the write operation for a record of the files affected by the 
transaction is determined to have terminated prematurely. 

27. (New) The computer-implemented method of claim 26, wherein each primary 
record of the primary file contains data for identifying records in files affected by the transaction. 

28. (New) The computer-implemented method of claim 27, wherein the records of 
the primary file and the records of the files affected by the transaction are linked by a pointer. 

***** 
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